linux创建ssh牢笼用户

linux创建ssh牢笼用户

useradd nginxlog
passwd nginxlog

mkdir /usr/local/dev
cd /usr/local/dev

mkdir dev/
mknod -m 666 null c 1 3
mknod -m 666 tty c 5 0
mknod -m 666 zero c 1 5
mknod -m 666 random c 1 8

chown root:root ./
chmod 0755 ./

mkdir bin
cp -r /bin/* bin/
mkdir sbin
cp -r /sbin/* sbin/
mkdir -p usr/bin
cp -r /usr/bin/* usr/bin/
mkdir -p usr/sbin
cp -r /usr/sbin/* usr/sbin/
mkdir lib64
cp -r /lib64/* lib64/

mkdir etc
cp -vf /etc/{passwd,group} etc/

vim /etc/ssh/sshd_config
# 定义要使用 chroot 监狱的用户
Match User nginxlog
# 指定 chroot 监狱
ChrootDirectory  /usr/local/dev

systemctl restart sshd

vim /etc/exports
/usr/local/nginx/logs  2.2.2.2(rw,no_root_squash,sync,insecure)

systemctl restart rpcbind.service
systemctl restart nfs.service
systemctl enable nfs.service
systemctl enable rpcbind.service

mkdir logs
mount 2.2.2.2:/usr/local/nginx/logs /usr/local/dev/logs/

echo "mount 2.2.2.2:/usr/local/nginx/logs /usr/local/dev/logs/" >> /etc/rc.local